Commits on Jul 28, 2023

1. Add support for cloning with CSR files …

   Previously during cloning pkispawn would retrieve database params
   and system cert params (i.e. <subsystem>.<tag>.*) from the master.
   However, the clone actually already has most of these params (from
   pkispawn config file and PKCS dogtagpki#12 file) except for the CSRs (i.e.
   <subsystem>.<tag>.certreq).
   
   The code in PKIDeployer.setup_database() that retrieves the params
   from the master has been modified to retrieve only the database
   params and the CSRs (unless the clone already has the them). In
   the future it might be possible to not retrieve anything from the
   master at all.
   
   The configuration.py has been modified such that the code that
   imports the certs and CSRs from files (if provided) will run in
   all cases including cloning instead of just in specific cases.
   
   The installation doc has been updated to show the optional steps
   for installing CA clone with CSR files.
   
   The test for CA clone has been updated to create the secondary
   subsystem without CSR files like before, then create the
   tertiary subsystem with CSR files.

   

   edewata committed Jul 28, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for b17a0e0
   • Browse repository at this point

   Copy the full SHA

   b17a0e0 View commit details

   Browse the repository at this point in the history